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What is claimed is: 

1 . A system for access authentication within a communications network, 
comprising a host data center in communication with one or more remote data 
centers, comprising: 

a master directory service contained within said host data center, said 
directory service containing data regarding personnel who are authorized to access 
devices in said data centers; 

a directory structure replication hub contained within said host data center, 
which receives directory structure information from said master directory 
structure; and 

a plurality of directory structure copies contained within each of said 
remote data centers, accessible by said devices. 

2. The system of claim 1, wherein said plurality of copies of said data 
structure is accessed by way of multiple servers via a load balancer, which 
balances the load handled by each copy of the directory structure contained within 
the customer data centers. 

3. A master directory structure, having a series of accounts contained 
within said master directory structure, comprising: 

multiple customer accounts subdirectories contained within said master 
directory structure; 

a group of directory nodes contained within said customer account 
directory subtree that have access only to other nodes within said customer 
directory subtree. 
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4. The master directory structure of claim 3, wherein said customer 
directory structures each contain multiple user accounts. 

5. A method for managing multiple customer accounts comprising the 
steps of: 

creating a master directory structure; 

replicating said master directory structure to multiple directory structures 
accessible by customer servers attached to a computer network. 

6. The method of claim 5, wherein said master directory structure is 
contained within a host data center. 

7. The method of claim 6, wherein said master directory structure is 
replicated by a directory structure replicating hub, said directory structure 
replicating hub being contained within said host data center. 

8. The method of claim 5, wherein said multiple directory structures are 
distributed among multiple remote data centers. 



